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Quantum formulas, denned by Yao [FOCS '93], are the quantum analogs of classical formulas, 
i.e., classical circuits in which all gates have fanout one. We show that any read-once quantum 
formula over a gate set that contains all single-qubit gates is equivalent to a read-once classical 
formula of the same size and depth over an analogous classical gate set. For example, any read- 
r- H once quantum formula over Toffoli and single-qubit gates is equivalent to a read-once classical 

formula over Toffoli and not gates. We then show that the equivalence does not hold if the 
read-once restriction is removed. To show the power of quantum formulas without the read-once 
restriction, we define a new model of computation called the one-qubit model and show that it 
i '» can compute all boolean functions. This model may also be of independent interest. 

^ 1 Introduction 

It is widely believed that quantum computers can outperform classical computers for certain prob- 
lems. Two prominent examples of such problems are factoring, solved by Shor's algorithm [18], 
Tj- and simulation of quantum systems [7, 13, 2]. Many restricted versions of quantum computers also 

outperform classical models. Studying the power of restricted quantum models can help identify 
the "quantum" features that are required for computational speedups. 

Some restricted models are also practically motivated, and could be available before we are able 
to build unrestricted quantum computers. The "one clean qubit" model [12], for example, can solve 
some problems that are not known to have efficient classical algorithms [19]. Similarly, log-depth 
quantum circuits can implement Shor's algorithm with the aid of a classical computer [5]. 

On the other hand, if enough restrictions are placed on a quantum model, it may be efficiently 
^ simulable by a classical model. In analogy with derandomization, we call this dequantization. For 

example, the simulation of a polynomial-time quantum computer by an exponential-time classical 
computer is an example of dequantization, albeit a very weak one. On the other hand, if the 
quantum model is equivalent to a classical model, we call this strong dequantization. For example, 
if it were shown that a polynomial-time quantum computer can be simulated by a polynomial-time 
classical computer, this would be an example of strong dequantization. In this paper, we strongly 
dequantize read-once quantum formulas by showing that they are equivalent to classical read-once 
formulas. 

Several past results can be viewed as dequantizing quantum models of computation. For exam- 
ple, Valiant introduced and dequantized a restricted model of quantum computation [21] that was 
later shown to be equivalent to a classical model [22]. Additionally, quantum circuits containing 



only Clifford gates are equivalent to classical circuits of CNOT and NOT gates [8, 4]. Other examples 
of dequantization appear in [6, 20]. 

Classical formulas are a well-studied restriction of circuits in which gates have a single output 
wire and each gate is a function from k > 1 bits to one bit. Compared to general circuits, the power 
of formulas is much better understood and several lower bound techniques are known for explicit 
functions [23, 11]. The study of formulas has lead to a better understanding of the difficulty of 
proving lower bounds for general circuits. Similarly, studying quantum formulas may lead to a 
better understanding of the power of quantum circuits. 

Indeed, little is known about quantum formulas. They were defined and examined by Yao [25] 
in 1993. But, other than additional results by Roychowdhury and Vatan [16], they are largely 
unstudied. 

In this paper, we ask whether it is possible to dequantize quantum formulas. Informally, the 
question is whether, for a quantum gate set G, there exists a classical gate set G of roughly 
equivalent power, such that any quantum formula over G can be written as a classical formula over 
G. We discuss this question in Section 3 and define an appropriate classical gate set G (Definition 1) 
corresponding to any quantum gate set G. Our main results (Theorem 1 and Theorem 2) essentially 
resolve this question for read-once quantum formulas by showing that read-once quantum formulas 
over a gate set that includes all single-qubit gates can always be dequantized. 

One utility of our classical gate set G is that, in some cases of interest, it corresponds to the 
gate set that one would naturally expect. For the set of all £>qubit channels (for some constant k), 
which is the gate set used in previous papers on quantum formulas [25, 16], G is the set of all k-bit 
gates. The set of arbitrary fanin Toffoli gates and all single-qubit gates is a commonly used gate 
set in quantum circuit complexity (see, e.g., [9]). We show in Theorem 3 that, for this gate set, G 
is the set of classical arbitrary fanin Toffoli gates and the not gate. 

It is natural to ask whether the read-once constraint is required for dequantization to hold. In 
Section 4 we show that Theorem 1 and Theorem 2 are false if the read-once constraint is dropped. 
In particular, we show that there exist quantum formulas over a gate set G that cannot be simulated 
by classical formulas over G. To show this we define a model of computation that we call the one- 
qubit model. Our model is similar to the "one clean qubit" model of Knill and Laflamme [12], 
but we do not have any mixed states in addition to the one clean qubit. We show that this model 
can compute any boolean function (Theorem 4). However, the one-qubit model is contained in 
quantum formulas over a gate set G for which G contains only the NOT gate and the parity gate. 
Even classical circuits of arbitrary size over NOT and parity cannot compute, for example, the and 
function on two bits. Thus our dequantization theorems are false without the read-once constraint. 

2 Preliminaries 

We start with an introduction to classical formulas and then extend the definition to quantum 
formulas. We refer the reader to textbooks on circuit complexity [23, 11] or quantum computing [15] 
for further information. 

A gate set F is a set of functions from k > 1 bits to one bit. A classical formula over a gate set 
F is a circuit composed of gates from F in which the output of each gate is connected to the input 
of at most one other gate — i.e., gates have fanout one. Note, however, that input bits may have 
arbitrary fanout, i.e., more than one gate can use the same bit x% as an input. The formula outputs 
a single bit and is said to exactly compute a boolean function / if the output of the formula is 





xi)— 


$j 






x?,)— 




$ 3 








xa>— 


$ 2 




xa)— 







\m) 



(a) 



(b) 



(c) 



Figure 1: (a) A classical (read-many) formula may use input bits multiple times to compute a 
function f(x). Here the input X2 is used twice and the formula is over the gate set G = {gi, <?2> 53}- 
(b) A classical read-once formula may use each input bit only once, (c) A quantum read-once 
formula has the same structure as a classical read-once formula, but may contain quantum channels 
with single qubit outputs. Here the quantum formula is over the gate set G = {<&i, $2, $3}- 



f(x) on input x. The restriction that each gate has fanout one makes the circuit look like a tree in 
which the output gate is the root, non-output gates are internal nodes, and leaves are labeled by 
input bits. A read-once formula is one in which each input bit appears at most once. 

Yao defined a quantum formula as a single-output quantum circuit composed of unitary gates 
in which the path connecting any input to the output is unique. Equivalently, a quantum circuit is 
a quantum formula if every gate has at most one output that is used as an input to a subsequent 
gate. The other outputs of a gate are never used again and can be discarded (traced out). We can 
regard the unitary and discard step as one operation and call that a quantum gate. This makes 
the analogy with classical formulas clearer. In this paper we use the phrases "quantum channel" 
and "quantum gate" interchangeably; a quantum gate need not be unitary. We will sometimes talk 
about a formula over a set of unitaries, which may have multiple output qubits. In this case, the 
formula may use any single-output channel obtained by applying one of the unitaries in the set and 
then tracing out all but one of the output qubits. 

We define a quantum gate set to be a set G of quantum channels from k > 1 qubits to one 
qubit. A quantum channel is a completely-positive trace-preserving map. In the case that k = 1 we 
call the channel a single-qubit channel, otherwise we call the channel a k-qubit channel. Note that 
a quantum formula may read input bits multiple times, just like a classical formula. A read-once 
quantum formula is one in which each input bit appears at most once. Figure 1 shows an example 
of a classical formula, a read-once classical formula and a read-once quantum formula. Similar to 
the classical case, one gate is designated as the output gate. A quantum formula is said to exactly 
compute a boolean function / if the output of the formula is \f(x)) on input x. In Section 3.2 we 
discuss how to extend this definition to bounded-error quantum formulas. 

The size of a formula is defined as the number of gates, excluding single-bit or single-qubit 
gates, following standard convention in classical circuit complexity. The depth of a formula is the 
maximum number of multi-bit or multi-qubit gates on any path from the output to an input. We 
say that a formula accepts a language L C {0, 1}* if on input x it outputs 1 if and only if x G L. 

We now state previously known results about quantum formulas. Yao first showed that the 
majority function needs super-linear sized bounded-error quantum formulas over the set of all 
three-qubit unitaries [25]. Later, Roychowdhury and Vatan [16] showed that a classical formula- 
size lower bound technique due to Nechiporuk [23, 11] also extends to bounded-error quantum 
formulas over the set of all /c-qubit unitary matrices, for any constant k. 



Roychowdhury and Vatan also showed that any function computed by a bounded-error quantum 
formula over fc-qubit unitaries can be computed by a classical circuit of slightly larger size and 
depth. Our result applies to a wider range of gate sets and dequantizes to the more limited model 
of classical read-once formulas. 

3 Dequantization of read-once formulas 

Our main objective is to determine the conditions under which it is possible to dequantize quantum 
formulas. More precisely, for a quantum gate set G we seek a classical gate set G for which a 
language L is accepted by a quantum formula over G if and only if it is accepted by a classical 
formula over G. 

Note that we want the two classes to be exactly equal in power, thus proving a strong dequan- 
tization result. If we only require that all functions computed by quantum formulas over G can be 
computed by classical formulas, then the result is trivial since we could just allow G to be the set 
of all boolean functions. 

In this section, we show that read-once quantum formulas, for gate sets which include all single- 
qubit gates, can be strongly dequantized to classical formulas of the same size and depth. We then 
explicitly construct the classical gates sets corresponding to some particular quantum gate sets 
of interest. For example, any read-once quantum formula over all fc-qubit channels is equivalent 
to a classical read-once formula over all fc-bit functions. Similarly, read-once quantum formulas 
over Toffoli gates and all single-qubit gates can be dequantized to classical read-once formulas over 
Toffoli and NOT. 

3.1 Dequantization of exact read-once formulas 

We first prove the claim for exact read-once formulas. The proof is simpler in the exact case, and 
contains all of the essential ideas. Extension to bounded-error is discussed in Section 3.2. 

Before attempting to prove the theorem, let us discuss the correspondence between the quantum 
gate set G and its classical counterpart G. Call a quantum channel classical if the output is classical 
whenever the input is classical. If G contains a classical channel, it is clear that G should contain 
a gate that performs the same classical operation. 

Some gates in G may be non-classical, but may be composed with other gates in a quantum 
formula to form a classical gate. Consider, for example, the depth-one quantum formula in Figure 2. 
Given a classical input, this formula outputs a classical bit and therefore computes a classical 
function /. For strong dequantization, we require that G admit a depth-one classical formula that 
computes /. 
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Figure 2: A depth-one quantum formula computes a classical function if on classical inputs it 
outputs a classical bit. 



We therefore define G to contain only those gates that can be obtained by depth-one quantum 
formulas over G. Informally, this is the smallest gate set that would suffice to prove a strong 
dequantization result. 

Definition 1. Let G be a set of quantum channels. Define G to be the set of all classical gates 
that are computable by a depth-one quantum formula over G. 

We will also need the following fact about density matrices and quantum channels. 

Fact 1. Let & be a single-qubit channel and p,o~ be 2 x 2 density matrices. If \\$(p) — $(<t)||i = 2 
then p and a are pure and orthogonal. 

Proof. We use the fact that the trace distance is monotone non-increasing under the action of 
quantum channels [24, (9.72)] to conclude that \\p — <r||i > 2. Thus \\p — a\\\ = 2, since the trace 
distance of two qubits cannot be larger than two [24, (9.11)]. Furthermore, the trace distance 
is maximum only when p and a have support on orthogonal subspaces [24, (9.12)]. Since these 
are 2x2 matrices which act on a two-dimensional vector space, their supports can be at most 
one-dimensional if the supports are orthogonal. Thus they can be written in the form p = \vp){ip\, 
a = \(p){4>\- Finally, since they have support on orthogonal subspaces, {i/j\4>) = 0, as claimed. □ 

We are now ready to state the main theorem. 

Theorem 1. Let G be a set of quantum channels that includes all single-qubit channels. Then a 
language L is accepted by an exact read-once quantum formula of depth d and size s over G if and 
only if L is accepted by a read-once classical formula of depth d and size s over G, where G is given 
by Definition 1. 

Proof. One direction of the "if and only if" is obvious; we only prove the other direction. The proof 
is by induction on the depth of the quantum formula. The claim is clearly true for depth-one since 
G contains all classical functions computable by depth-one quantum formulas over G. 

Consider the final multi-qubit gate <J> G G of a depth-d quantum 
formula that accepts language L. <£ may be followed by a single- P 
qubit channel \l/, the output of which is a classical state. Let m be 
the number of inputs to $. 

Each input qubit to <3? is the output of a quantum sub-formula 
of depth at most d— 1 on a distinct subset of the original input bits. 
We cannot invoke the induction hypothesis directly on the depth- 

(d-1) sub-formulas, however, because the outputs may be quantum Fl g ure 3: The final g ates $ 
states. We will show that each sub-formula can be replaced with and * of a q uantum formula, 
different sub-formula of the same size and depth that outputs a 
classical bit. 

Without loss of generality, let the first input of $ depend on the input bits {xi, . . . ,x{\ for 
some 1 < I < n. Let the state of the first input qubit, which is a function of {x\, . . . , xi}, be called 
p. Let a be the state of the remaining input qubits. Thus a is a function of the remaining inputs 
{xi + i, ... ,x n }. 

Let P be the set of all distinct states p obtained by enumerating over all inputs {x±, . . . ,Xi}. 
Our goal is to show that either P contains exactly two orthogonal pure states or the output <& is 
independent of the first input qubit. If P contains exactly two orthogonal pure states, then there 
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Figure 4: Single qubit channels are prepended to input qubits. If the input qubit depends on the 
input to the formula then both the channel and its adjoint are prepended. Otherwise, the input 
qubit is fixed and is replaced by a single channel. The channel <& is then replaced by a classical 
gate ReG. 



is a unitary channel ^i such that ^i(p) £ {|0)(0|, |1)(1|} for all p £ P. By composing *&i and <J> 
we may construct a new channel that accepts a classical bit as its first input. On the other hand, 
if the output is independent of the first input, we can consider a channel ^i that always outputs a 
fixed state independent of its input. 

First, we look for two density matrices in P, which we will call p\ and p2, and a bit string 
X[ + i ...x n such that the induced state a satisfies $(pi <8> <r) 7^ 3>(p2 ® o")- Since the formula is 
read-once, bits {xi, ■ . . , x{\ are independent of bits {xj+i, . . . , x n }. Thus if there are no pi, P2 and 
a that satisfy the above condition, then the output of $ is independent of {xi, . . . , xi} and we may 
replace p by a channel ^1 that on any input (and classical inputs in particular) outputs some fixed 
element of P. Note that this is the only place in the proof in which the read-once condition is 
required. 

Assume that such a pi, P2 and a exist. For this fixed a, define $'(p) := ^(^(p cr)). The 
output of 3>' is a classical state and therefore p\ and pi induce orthogonal classical outputs. Thus 
ll^'(Pi) ~~ ^'(P2)||i = 2 and by Fact 1, we know that p\ and P2 are pure and orthogonal. Let \&i be 
a unitary channel such that $i(pi) = |0)(0| and ^1(^2) = |1)(1|- 

We now show that \P\ = 2. That is, p\ and P2 are the only states in P. Assume that \P\ > 2, 
and let ps G P be distinct from pi, p2 and such that 3>'(p3) 7^ $'(pi). Since $'(p) is classical 
for any p £ P, using Fact 1 we again have that pi and p% are pure and orthogonal. But since P2 
is the unique state orthogonal to pi, we conclude that P3 = P2, a contradiction. Assuming that 
3>'(p3) 7^ &{p2) similarly leads to a contradiction. 

A similar argument applies for the set of possible states on the remaining input qubits of <J>. 
For each qubit k there are two possible (pure) states po and pi and a unitary channel ^k such 
that ^fc(po) = |0)(0| and ^(pi) = |1)(1|, or the action of $ is independent of qubit k and we may 
replace it with an input-independent channel ^>k- We now add the gates ^ before gate Vf on input 
qubit k. If ^fc was an input-independent channel, we have not changed the output of the circuit. If 
^k was a unitary channel that changes basis, we now need to add \l/]. before it to ensure that the 
output is unchanged. The channel formed by the \I/fcS, $ and the output gate ^' m is now classical 
and has the same action as a classical gate R £ G as shown in Figure 4. 

The inputs to R are quantum sub- formulas of depth at most d — 1, each of which outputs a 
classical bit. By induction, each sub-formula may be replaced by a classical formula of the same 
depth over G. The resulting circuit is a depth-d classical formula over G that accepts language 
L. □ 



3.2 Extension to the bounded-error case 

We now extend the main result to the bounded-error setting. The proof is essentially the same 
as that of Theorem 1, but does not require that the formula outputs be orthogonal states. This 
section can be safely skipped without loss on continuity. 

There are several natural definitions of bounded-error quantum formulas. For example, we 
could say that a quantum formula over a gate set G computes a function / with error e, if on input 
x, the output of the formula is e-close to \f(x)) in trace distance. However, for bounded-error, most 
reasonable definitions will be equivalent (up to constant factors). So we use the following definition 
which is more convenient for our proofs: A quantum formula over G computes / with error 5 if all 
the output states corresponding to f(x) = are at least 2 — 5 away in trace distance from all the 
output states corresponding to f(x) = 1. 

This definition is equivalent to the previous one, up to constants, by noting that if one state is 
close to |0) and the other is close to |1), then they must necessarily by far apart, which can be proved 
using the triangle inequality. In the other direction, using a result of Gutoski and Watrous [10], it 
can be shown that two sets of states with a lower bound on the minimum pairwise distance can be 
distinguished with high probability. Note that when 5 = e = 0, the definitions coincide, except that 
the second definition only requires the output states to be orthogonal, not necessarily |0) and |1). 
Since our gate sets contain all single-qubit gates, this distinction is not important. The definition 
of G will also have to be similarly modified to incorporate bounded-error quantum formulas over 
G. 

In the exact case, the output of a formula is always either |0) or |1). Furthermore, we showed 
that even the output of sub-formulas is classical, up to a change of basis. We now want to prove a 
similar claim for bounded-error sub-formulas. We wish to show that if the function depends on the 
output of a sub-formula, then the set of output states of the sub-formula can be partitioned into 
two non-empty sets, Sq and Si, such that the trace distance between any pair of states in So and 
Si is at least 2 — 5. 

Now we can state the bounded-error analog of Theorem 1. Note that the definition of G used 
in this theorem is different from that in Theorem 1, since it allows functions to be computed with 
bounded error. 

Theorem 2. Let G be a set of quantum channels that includes all single-qubit channels. If a 
language is accepted by a bounded-error read-once quantum formula over G then it is also accepted 
by an exact read-once classical formula over G, of the same size and depth, where G is defined as 
the set of all classical gates that can be computed by a depth- one bounded-error read- once quantum 
formula. 

Proof. The proof proceeds like the proof of Theorem 1. We use the same notation as in the other 
proof. As before, we consider the first input of the last multi-qubit gate, and assume it depends on 
the input bits {xi, X2, . • • , x{\, and let P denote the set of all states obtained by enumerating over 
the the input bits {xi, X2, • . . , xf\. Denote the state on the rest of the inputs to the last gate as a. 
First we look for two states in P, p and p' , and a bit string x;+i . . .x n which induces a state a 
on the other inputs such that p % a and p' ' ® a lead to different outputs of the formula. If no such p, 
p' and a exist, then the output of the last gate is independent of {xi, . . . , x{\ and we may replace 
the first input qubit by a channel that on any input (and classical inputs in particular) outputs 
some fixed element of P. 



Assume that such a p, p' and a exist. As before, for this fixed a, define $'(p) := \I/(<I>(p 
o")). Without loss of generality, assume that p leads to output and p' leads to output 1. Let 
Sb '■= {p G P : p leads to output b}. Then for any states po G So and pi G Si we must have 
((^'(po) — $'(pi)||i > 2 — 5. Using the monotonicity of trace distance under quantum channels [24, 
(9.72)], this implies ||po _ Pi Hi > 2 — 5, which means all the states in So are far from all the states in 
Si . Thus the first sub- formula satisfies the definition of a bounded-error quantum formula. By the 
induction hypothesis, there is a classical formula over G of the same size and depth that outputs 
when the quantum sub-formula would have output some state in So and outputs 1 when it would 
have output some state in Si. 

Now we wish to show that all the states in Sb are equivalent from the perspective of the last 
gate. More precisely, let po and p' be two different states in So, and let a be some valid state 
induced by x;+i, . . . x n . Let us also partition the output states of the last gate into two sets To and 
Ti, for which the trace distance between any pair of states in the two sets is at least 2 — 5. We wish 
to show that if the output corresponding to po a is in T&, then so is the output corresponding to 
p'o 8 a. States po® a and p a arise due to valid input strings x and x', respectively. Thus the 
corresponding outputs must be in To or T\. Since the output of po ® a is in T&, and since po cannot 
be too far from p , the output of p' Q <£>cr is also in T^. More precisely, since both po and p are at least 
2 — 5 away from some state pi G Si, we know that they can be at most 25 distance apart. Thus, 
by monotonicity of trace distance under quantum channels, their corresponding outputs cannot be 
too far apart. 

Now we know that all the states in Sb are equivalent from the perspective of the last gate. We 
also know that there is a classical formula over G of the same size and depth that outputs when 
the quantum sub-formula would have output some state in So and outputs 1 when it would have 
output some state in Si. We can just add a single-qubit gate to the output of this sub-formula, 
which on input |0) outputs some fixed state po from So and on input |1) outputs a fixed state pi 
from So- This formula also computes the same function f(x), as shown in the previous paragraph. 

Continuing this on all the inputs to the last gate, we obtain a depth-one quantum formula which 
accepts as inputs the outputs of a classical depth d — 1 formula. Using the definition of G, there 
is a classical gate that computes the same function, which gives us a classical depth-d formula for 
the entire function. □ 

3.3 Application to concrete gate sets 

A simple corollary of Theorem 1 is that L is accepted by a read-once quantum formula over the set 
of all fc-qubit channels (for some constant k) if and only if it is accepted by a read-once classical 
formula over the set of all A;-bit functions. This is the gate set used in the previous studies of 
quantum formulas [25, 16]. 

Another gate set of interest is the set of arbitrary fanin Toffoli gates and all single-qubit gates. 
This gate set is commonly used in the study of quantum circuits [9] . We now explicitly construct 
G for this gate set and show that it only contains classical arbitrary fanin Toffoli gates and the 
not gate. 

Let us define <£„ to be the quantum channel obtained from a Toffoli gate with m > 2 qubits 
by tracing out all the m — 1 control qubits. We can assume that all Toffoli gates that appear in the 
formula always output the target qubit and trace out the control qubits because by conjugating 
the target qubit and a control qubit with the Hadamard matrix, H , it is possible to exchange the 
roles of the target and that control qubit. 
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Figure 5: A depth-one quantum formula over single-qubit gates and an m-bit Toffoli gate. 



To compute G for the set of all single-qubit gates and &™ for m > 2 it suffices to list all possible 
classical gates that can be obtained from ^^ by placing single-qubit channels before and after it. 
The classical m-bit Toffoli gate computes the function f(xi,X2, • • • , x m ) = (xi AX2A. . . Ax m _i)®x m . 
Let i 7 ^ be the set of all functions obtained from the classical m-bit Toffoli by placing single-bit 
gates before and after it. The only single-bit gates are not gates, and channels that output a 
constant bit. 



Theorem 3. Let f be any function on x £ {0, l} r 
gates before and after $ m . Then f G F m °. 



that can be obtained by placing single-qubit 



Proof. Let the classical function / be defined by single-qubit channels \Pi,... , \Pm on the inputs 
followed by 3>^ f an d a single-qubit quantum channel ^' m on the output qubit. 

Let {pi, . . . , pro] be the inputs to <&~ (i.e., the outputs of \&i, . . . , \I/ m ) induced by a particular 
choice of x, and p' m be the output of the channel (i.e., the input to ^' m ). See Figure 5. 

First let us handle the trivial cases. If ^ m is a channel which always outputs an eigenstate of 
X, i.e., Xp m X = p m for x m = and x m = 1, then the Toffoli gate leaves it unaffected. Thus the 
output p' m is only a function of x m , and since the output of the gate is classical, it is some classical 
one-bit function of x m , all of which are contained in F^ . We may now assume this is not the case. 
Let us also assume that / outputs on some input and 1 on some input, otherwise it is a constant 
function. 

For any x,x' £ {0, 1} m_1 , define a(x, x') = Yli^=i Pi{ x i-, x 'i)- Furthermore, let < a < 1 be 



defined as a = q(1I ... 1, 11 ... 1). Then the input to <5^ of is pi < 
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By assumption, ^' m {p' m ) is classical and both outputs and 1 are possible, thus by Fact 1, p' m 
must always be pure. Since we have also assumed that Xp m X ^ p m , (1) implies that p' m can be 



pure only if a = or a = 1. But a takes values or 1 on all inputs, so the following short argument 
implies that each pi must be classical (i.e., pi(0, 0) = or pi(Q, 0) = 1) for every input x. Toward 
a contradiction, assume this is not the case. Thus, for some i, there exists an input X{ so that pi is 
not classical and, in particular, pi(l, 1) 7^ and pi(l, 1) 7^ 1. On this input x, YYi=\ PiO-i 1) cannot 
be or 1. But this quantity is a, which could only be or 1. Thus we have reached a contradiction, 
and all the pi must be classical for every input x%. But this means every channel \IJj is a classical 
one-bit function of X{. Thus the inputs to $^ of are always classical and so $^° can be replaced 
with its classical equivalent, which completes the proof. □ 

This theorem shows that the only classical gates obtainable from c &^ of by placing single-qubit 
channels before and after it are the classical Toffoli gate of size m and gates derived from it using 
single-bit gates. In particular, this means that if the gate set G contains all single-qubit channels 
and the CNOT gate, which is the Toffoli gate for m = 2, then G contains only the cnot gate and 
the not gate. We use this result in Section 4. 

4 One-qubit model 

Informally, Theorem 1 and Theorem 2 show that read-once quantum formulas are equivalent to 
classical read-once formulas. We now show that the claim is no longer true if we drop the read-once 
constraint. To this end, we introduce a new model, which we call the one-qubit model. This model 
is independent of the previous sections, and may be of interest outside of the context of quantum 
formulas. 

The one-qubit model consists of a single qubit initialized to |0) followed by an alternating 
sequence of single-qubit unitaries and cnot (controlled-X) gates. The control of each cnot is a 
bit Xi of the input x. The output is determined by a measurement in the standard basis. See 
Figure 6. We call an algorithm of this kind a one-qubit program. We say that a one-qubit program 
exactly computes a function / if the output of the measurement is f(x) with probability one on 
input x. 



x 






\ti)—U Q -X-Ui-X- -X-U k -^A=f(x) 



Figure 6: A one-qubit program of length k. 

The length of a one-qubit program is defined as the total number of cnot gates. For instance, 
the program in Figure 6 has length k. Notice that the model is unchanged if, instead of cnot, 
we choose any controlled- F gate such that UVW = X for some single-qubit unitary U. Note also 
that input bits may be re-used as many times as desired. 

We prove that the one-qubit model is universal, that is, it can compute all boolean functions. 
Specifically, if a boolean function has a depth-d circuit over fanin-2 AND and OR, and NOT gates, 
then it has a one-qubit program of length 4 . Here, the depth of a circuit is defined as the maximum 
number of AND or OR gates on any path from the output to an input. Note that all boolean functions 
can be expressed as circuits of polynomial depth, thus one-qubit programs of exponential length can 
compute all boolean functions. Moreover, one-qubit programs with polynomial length can exactly 
compute any function in NC 1 , the set of functions computed by log-depth poly-size bounded-fanin 
circuits over and, or and not. Our proof resembles the original proof of Barrington's theorem [3], 
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a surprising result in complexity theory, which showed that bounded-width branching programs 
can compute any function in NC 1 . 

Theorem 4. The one-qubit model can compute all boolean functions. More precisely, any function 
that has a depth-d circuit over fanin-2 and and OR, and not gates can be computed exactly by a 
one-qubit program of length 4 d . 

Proof. Use the notation X x to denote a cnot gate that is controlled by the variable x. Let C be 
a circuit of depth d that computes a function C(x). Starting from the circuit C, we construct a 
one-qubit program F of length A d that computes the same function. That is, F = X c ^ x > so that 
F|0) = |C(z)>. 

We prove the claim by induction on the structure of the circuit. Circuit C can be seen as a 
binary tree with the input variables as the leaves of the tree and the gates as the internal nodes. 
Given a gate at the root of the circuit (and or not), we assume that the induction hypothesis 
holds for the subcircuits that produce the inputs of the gate and we prove the claim for the entire 
circuit. 

Let us start with the base case. If C is a single variable Xi, the corresponding one-qubit program 
is a single cnot gate controlled by Xj, i.e., F = X Xi . 

The induction step consists of two cases. Suppose that C is composed of a not gate and a 
subcircuit C", and let F' be the one-qubit program of length 4 that simulates C . Then we can 
append a Pauli-X gate to F' and obtain the program F of the same length 4 rf that computes C, 
i.e., F = XX C '^ = X&W = X c{ - X \ Note that the depth of circuits C and C" is the same, since 
not gates do not contribute to the depth. Also note that single-qubit unitaries do not contribute 
to the length of the program, and thus the length is unchanged. 

Now suppose C is composed of an and gate that connects two subcircuits C and C" and let 
F' and F" be the programs of length 4 rf ~ 1 that compute C and C", respectively. Then consider 
the following program F described as an equation: 

F = vx C'(x) H C"(x) x C'(x) H C"(x)y = y, iY ^C'(x)AC"(x) v = iX C(x)^ ( 2 ) 

where V = 4j(X + Y) is the unitary that satisfies V 2 = 1, VYV = X and VXV = Y. 

This program effectively computes the and of two sub-programs. It starts with a V gate, 
followed by the subprogram F', which is equivalent to X c W. Then we need a subprogram that 
performs H ^ x >. By the induction hypothesis, we have a subprogram F" that performs X ' x '. 
Since the Hadamard matrix and Pauli X gate are unitarily equivalent, there is a unitary matrix R 
such that RXR = H and RHR = X. Conjugating X c "^ with R gives us RX C "^R, which is 
the same as {RXR) C ( x \ which is H c ( x >. The other gates in F are constructed similarly. 

Thus the program F requires some single qubit gates, two copies of the program for F' and two 
copies of the program for F". Since F' and F" have length at most 4 d_1 and single qubit unitaries 
do not count towards the length, we get a program F of length 4 d , which performs X c ^ x > up to an 
irrelevant global phase. 

These two cases suffice to prove the theorem since we can replace the OR gates in the circuit by 
and and not gates, without increasing its size or depth. □ 

In the case of NC 1 , the depth of the circuit is at most O(logn), therefore the length of the 
resulting one-qubit program is polynomial. 
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Corollary 1. Any function in NC 1 can be computed exactly by a one-qubit program of polynomial 
length. 

Now that we have shown that the one-qubit model can compute all boolean functions, it remains 
to show that our dequantization claim is false without the read-once constraint. First observe that 
the one-qubit model is a restricted model of quantum formulas over the gate set G consisting of all 
single-qubit gates and the cnot gate. 

We know from Theorem 3 (case m = 2) that, in this case, the classical gate set G consists of 
only the not gate and parity gate. But no formula and, indeed, no circuit of any size over G can 
compute the and of two bits, since not and parity do not form a complete basis. In particular, 
circuits over G can only compute functions expressible as degree-one polynomials over ¥2. Thus 
we conclude that Theorem 1 and Theorem 2 are false if the read-once constraint is dropped. 

Readers familiar with quantum branching programs [14, 17, 1] may notice that the one-qubit 
model is contained in exact width-two quantum branching programs. However, in our model the 
only input-dependent gate is a Pauli-A, whereas in quantum branching programs, we can apply 
arbitrary input-controlled unitaries. By conjugating the X gate with arbitrary single qubit gates 
the one-qubit model can obtain any unitary matrix with the same eigenvalues as X, but not an 
arbitrary unitary matrix. Thus it is not clear that results about width-two quantum branching 
programs can be ported over to our model. 

5 Conclusions and open problems 

We have shown that read-once quantum formulas over any gate set are only as powerful as read- 
once classical formulas over a related gate set. As a concrete example, we showed that read-once 
quantum formulas over Toffoli and single-qubit gates dequantize to the natural analog, read-once 
classical formulas over Toffoli and NOT gates. Perhaps our results may be extended to constant- 
depth quantum circuit classes, many of which are defined over Toffoli and single-qubit gates, e.g., [9]. 
Our proof technique fails when the formula restriction is lifted, but for constant-depth it may be 
possible to reuse some of the same ideas. 

Another obvious open problem is to dequantize all quantum formulas, not just read-once for- 
mulas. Although we show that our classical gate set is insufficient to do so, there might be another 
classical gate set that works. 

Finally, our dequantization result implies that lower bounds on read-once quantum formulas 
may be obtained from analogous classical lower bounds. For related models, including general (i.e., 
not read-once) quantum formulas and constant-depth quantum circuits, the problem of finding 
non-trivial lower bounds remains. 
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